$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0db794e-874c-3530-8aea-c1d80271e2df.roa File: a0db794e-874c-3530-8aea-c1d80271e2df.roa (raw, json) Hash identifier: KiEIHijRYJt0bLGJFtrhZPIUhd0wZkaE+puoqpx9Apw= Subject key identifier: 5D:34:34:75:16:9E:A6:61:D6:8E:7D:5A:B0:4D:64:47:7A:6E:0F:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841240F67E5FC0E5CC4F2300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0db794e-874c-3530-8aea-c1d80271e2df.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:40:f6:7e:5f:c0:e5:cc:4f:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5b44988b-9a95-4925-8d6b-b2650d956520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:0a:13:20:b9:e2:79:23:78:4e:47:db:43: 81:e7:49:da:ec:f6:54:53:62:b6:fb:14:61:08:79: 4d:44:61:2a:2e:1c:42:5f:5c:71:28:28:54:2f:74: dc:9a:f8:41:82:7d:54:7d:6e:9f:72:d6:4a:2b:d1: bb:56:d2:ee:84:4b:61:86:b4:0b:9d:00:be:e9:b5: 2a:5d:32:07:7d:ab:f6:3e:51:dc:69:76:f8:04:7e: 0b:40:4e:a0:b7:b4:18:cb:25:08:2a:c5:1d:77:51: d8:0a:cf:b4:c9:49:1d:40:50:60:fd:56:57:ab:5b: 85:5f:db:8f:b3:38:fc:cf:a0:c5:5c:93:84:fe:c3: 06:3c:e6:12:7f:3f:04:5a:00:92:75:f8:50:73:a3: 13:31:c4:fb:48:e6:01:79:b7:26:8d:a5:65:cf:f9: f3:a3:93:2e:6d:fe:2e:99:3e:41:51:e6:51:cf:73: bf:a2:51:ae:3c:89:c7:43:ad:dc:dd:21:66:31:fe: 8a:65:4e:44:aa:da:b7:3f:a5:04:fd:6a:d0:a8:fd: 5e:fa:66:61:09:48:60:a9:a5:62:1b:4d:e3:4f:a4: 69:86:28:e1:ff:e6:76:e0:a8:4d:3a:cd:05:7a:00: 1d:86:6b:30:2a:15:38:13:13:26:0f:4a:95:df:20: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:34:75:16:9E:A6:61:D6:8E:7D:5A:B0:4D:64:47:7A:6E:0F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0db794e-874c-3530-8aea-c1d80271e2df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b9:05:cf:59:13:61:da:68:b7:c4:8e:08:2b:d5:8b:08:ca: 36:79:9b:85:9c:1d:2c:67:ad:e7:ef:2e:b0:b5:52:ae:34:19: e7:ab:e6:a5:84:b5:4f:ae:e3:1e:e5:d2:99:be:f7:87:78:23: 06:ab:ed:42:7b:bf:be:61:73:e9:75:ef:45:f1:70:7d:a3:16: 2d:f3:5d:a0:f4:a2:f5:a2:51:cf:29:86:1e:e8:39:73:85:0a: 2b:02:3e:76:d2:77:de:b2:4f:0f:d9:d2:50:5d:48:7a:3a:12: dd:66:2b:09:ed:cf:1f:da:12:64:31:5f:92:37:a9:42:27:5a: 14:a7:c8:43:80:42:25:d4:9d:2b:2a:1b:91:71:ed:33:30:6f: a2:17:a6:3f:72:ec:c1:3b:c8:29:aa:33:30:5e:70:cf:76:dc: 21:b2:17:c5:b4:b9:4f:35:61:8a:66:29:82:38:b6:3b:63:e9: 49:d7:cd:f8:ee:59:7b:d2:0e:47:7a:79:c0:1a:fe:70:e4:1c: 39:22:65:93:32:e2:90:44:2e:a2:61:6d:ac:c5:29:d7:c4:c1: 5e:cf:ba:be:52:75:04:91:16:13:49:07:0f:c7:53:46:3b:35: c7:9a:18:37:03:c5:d6:f1:93:27:3f:da:57:af:46:6f:ed:38: 20:46:58:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkD2fl/A5cxPIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWI0NDk4OGItOWE5NS00OTI1LThkNmItYjI2NTBkOTU2NTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K0KEyC54nkjeE5H20OB50na7PZUU2K2+xRh CHlNRGEqLhxCX1xxKChUL3TcmvhBgn1UfW6fctZKK9G7VtLuhEthhrQLnQC+6bUq XTIHfav2PlHcaXb4BH4LQE6gt7QYyyUIKsUdd1HYCs+0yUkdQFBg/VZXq1uFX9uP szj8z6DFXJOE/sMGPOYSfz8EWgCSdfhQc6MTMcT7SOYBebcmjaVlz/nzo5Mubf4u mT5BUeZRz3O/olGuPInHQ63c3SFmMf6KZU5Eqtq3P6UE/WrQqP1e+mZhCUhgqaVi G03jT6Rphijh/+Z24KhNOs0FegAdhmswKhU4ExMmD0qV3yBfHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF00NHUWnqZh1o59WrBNZEd6bg8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTBkYjc5NGUtODc0Yy0z NTMwLThhZWEtYzFkODAyNzFlMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm5Bc9ZE2HaaLfEjggr1YsIyjZ5m4WcHSxnrefvLrC1Uq40Geer5qWE tU+u4x7l0pm+94d4Iwar7UJ7v75hc+l170XxcH2jFi3zXaD0ovWiUc8phh7oOXOF CisCPnbSd96yTw/Z0lBdSHo6Et1mKwntzx/aEmQxX5I3qUInWhSnyEOAQiXUnSsq G5Fx7TMwb6IXpj9y7ME7yCmqMzBecM923CGyF8W0uU81YYpmKYI4tjtj6UnXzfju WXvSDkd6ecAa/nDkHDkiZZMy4pBELqJhbazFKdfEwV7Pur5SdQSRFhNJBw/HU0Y7 NceaGDcDxdbxkyc/2levRm/tOCBGWPo= -----END CERTIFICATE-----Generated at Wed Aug 6 05:49:54 2025 by rpki-client